Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/wpmkhn7MtpWlWDqS7v08qnuoFdY.roa
File: wpmkhn7MtpWlWDqS7v08qnuoFdY.roa (raw, json)
Hash identifier: 34KGuAwFXepl2mueXI+PWCiLTgtJ4D0Gg0Z0V5uio1k=
Subject key identifier: C2:99:A4:86:7E:CC:B6:95:A5:58:3A:92:EE:FD:3C:AA:7B:A8:15:D6
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A08CF3443C4E7336765B8B575D3C62FEFB
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/wpmkhn7MtpWlWDqS7v08qnuoFdY.roa
Signing time: Thu 10 Sep 2026 20:12:28 +0000
ROA not before: Thu 10 Sep 2026 20:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 194.38.50.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:f3:44:3c:4e:73:36:76:5b:8b:57:5d:3c:62:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 10 20:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c299a4867eccb695a5583a92eefd3caa7ba815d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:3b:b2:05:d2:46:66:d3:ee:db:0c:0b:eb:
ff:03:4a:88:52:11:05:46:8b:06:80:8b:80:34:73:
af:f6:aa:9c:3b:83:4e:14:11:71:15:5e:9e:3c:2b:
cf:ed:6b:fc:fa:42:82:06:9b:09:0e:5b:49:42:8e:
6b:23:a2:1a:b6:d7:27:74:8d:f5:01:3f:a2:bb:3d:
ca:6f:99:51:02:6b:da:43:10:a0:40:a1:59:a2:f0:
7a:80:60:7a:22:81:73:8f:63:4d:d0:ae:1a:65:79:
25:46:58:e3:8e:e9:a8:93:1c:f7:de:34:44:5c:f9:
ef:9d:43:3e:2f:ac:48:07:86:5a:85:2e:6a:ab:c8:
01:52:bc:0b:85:1e:20:3d:5b:a0:53:97:fa:e1:e1:
13:6c:cd:8c:06:80:59:89:83:df:1a:29:c3:4a:58:
10:9a:e2:6f:bc:82:31:97:c1:e1:14:b5:2e:4e:fe:
05:3b:d3:d7:72:41:ef:14:f5:b3:a4:8f:be:89:37:
5a:fd:5a:97:35:08:dd:ee:93:25:e3:26:4e:f9:eb:
fd:3e:93:9c:95:83:33:c7:de:b4:ea:7f:bc:6b:fb:
21:f3:aa:9a:46:01:e6:47:72:da:f4:2b:1e:f1:9e:
f8:66:08:1e:d1:88:3c:45:7d:81:0d:fb:e2:ab:f8:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:99:A4:86:7E:CC:B6:95:A5:58:3A:92:EE:FD:3C:AA:7B:A8:15:D6
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/wpmkhn7MtpWlWDqS7v08qnuoFdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:4c:a0:70:3a:4a:60:1c:66:69:0e:c4:7a:5d:90:da:29:11:
6b:8f:73:81:eb:1e:51:57:03:22:bc:3b:76:1b:c6:6b:b4:97:
4f:4c:b8:fd:a5:29:32:54:5a:2b:ae:d9:8c:ce:bc:62:b0:07:
6c:4b:e6:0e:ee:4e:40:f3:1d:d0:d8:ea:91:74:11:28:9a:d8:
5d:e2:5d:ab:4a:e4:f7:52:77:70:40:8f:ef:7f:47:ec:10:bf:
70:49:a8:ba:93:33:9a:91:c0:df:b7:d2:fa:7e:03:26:32:36:
d1:af:d7:0d:31:14:1d:92:81:ff:9f:1c:94:4e:19:05:33:c2:
05:28:c0:f2:56:68:85:ea:14:a9:b9:4e:88:c4:ae:be:dc:c0:
39:96:e2:29:c3:6e:e9:5b:80:da:cb:46:be:c3:d8:ea:b3:5c:
dd:22:76:6b:88:f8:a0:94:b3:98:f7:fe:18:ba:9e:db:18:9e:
0e:30:f9:d5:64:31:d7:1e:72:63:fb:fa:f9:5f:d8:a4:65:d5:
3a:07:ff:75:64:c2:6d:8f:66:92:ee:44:09:7f:8d:29:2d:6b:
24:42:3f:10:32:fa:87:4c:87:22:5d:af:07:7a:bf:16:18:6a:
71:4c:4a:a2:ae:c0:2a:db:8e:40:f6:4a:ca:fe:6a:6d:4e:a5:
76:5a:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:49 2026 by rpki-client